$ rpki-client -vvf repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/3131302e3233322e39352e302f32342d3234203d3e20313532373830.roa File: 3131302e3233322e39352e302f32342d3234203d3e20313532373830.roa (raw, json) Hash identifier: KKgzSBHp3Ecp/FkwFzaeOul35LJroRy40u5hunRhX78= Subject key identifier: CC:73:F8:1A:11:C7:D7:CA:5E:5F:F7:64:C4:04:F6:D9:B0:FB:83:89 Certificate issuer: /CN=552B31A26E92A9DD6A585B92375B7FCA4FA66984 Certificate serial: 0A2AAF28E27D2E494488008E5695652C5DBF17F8 Authority key identifier: 55:2B:31:A2:6E:92:A9:DD:6A:58:5B:92:37:5B:7F:CA:4F:A6:69:84 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer Subject info access: rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/3131302e3233322e39352e302f32342d3234203d3e20313532373830.roa Signing time: Wed 17 Sep 2025 08:31:32 +0000 ROA not before: Wed 17 Sep 2025 08:26:32 +0000 ROA not after: Wed 16 Sep 2026 08:31:32 +0000 asID: 152780 IP address blocks: 110.232.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.crl rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 15:20:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:2a:af:28:e2:7d:2e:49:44:88:00:8e:56:95:65:2c:5d:bf:17:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=552B31A26E92A9DD6A585B92375B7FCA4FA66984 Validity Not Before: Sep 17 08:26:32 2025 GMT Not After : Sep 16 08:31:32 2026 GMT Subject: CN=CC73F81A11C7D7CA5E5FF764C404F6D9B0FB8389 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:a7:f0:7b:d6:ef:55:d6:1c:39:12:f5:9e:58: 0b:9c:bf:ac:fd:39:91:3f:9d:5b:a4:84:c9:b4:74: 3f:77:65:9b:e4:e4:12:4a:33:c9:b5:4d:35:45:f4: 67:af:22:df:6b:4a:65:a0:ac:aa:1e:90:ba:4c:96: ed:bb:a6:36:da:57:c9:05:ce:8d:68:42:b2:08:16: 4c:6e:31:a8:55:89:dd:82:20:4d:2b:0d:10:2b:2a: 4c:28:99:5d:20:a8:9b:1e:fd:6e:55:38:7d:9c:19: 4c:e6:0f:10:5c:62:0c:84:7c:84:00:2d:56:f7:7d: 4a:09:04:86:06:04:a0:7a:8c:1e:77:8e:d0:f1:25: 16:f5:f5:a6:44:69:5f:7d:9b:86:d3:37:94:82:43: 8a:8c:33:ac:7b:cb:67:5b:06:43:f4:c4:84:72:82: 5c:e1:23:14:be:00:eb:46:41:b0:1a:f3:08:c3:9a: 69:c5:a8:58:ab:ce:c0:46:42:68:87:63:32:29:45: 6d:68:06:9a:02:61:d3:d6:81:ff:6c:1d:57:88:c1: 4f:e1:49:2b:81:7c:e6:2b:07:96:7d:ac:8e:77:05: c5:0a:56:f3:69:3f:ed:69:03:df:7f:6d:3e:f8:9e: 0d:27:5e:df:f4:f3:25:2d:65:a4:8b:3f:fd:5b:e4: 5c:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:73:F8:1A:11:C7:D7:CA:5E:5F:F7:64:C4:04:F6:D9:B0:FB:83:89 X509v3 Authority Key Identifier: keyid:55:2B:31:A2:6E:92:A9:DD:6A:58:5B:92:37:5B:7F:CA:4F:A6:69:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/3131302e3233322e39352e302f32342d3234203d3e20313532373830.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 110.232.95.0/24 Signature Algorithm: sha256WithRSAEncryption 14:84:14:37:4f:84:5a:31:57:b7:31:2f:cc:b7:2b:f5:15:b7: 68:41:1c:e7:95:f8:8e:07:e2:29:4b:9c:6f:1e:be:21:4c:eb: 23:f9:76:c5:46:58:e9:7d:bc:b1:b5:8d:59:9d:ad:eb:e2:45: 1e:c8:3d:07:71:c2:b5:d1:8e:14:05:ca:d2:e3:7b:09:cf:3f: 03:37:74:a5:d4:c3:c6:c5:01:b3:94:3e:c4:88:9e:78:d7:5e: c0:01:db:fd:ad:80:80:24:71:57:d4:64:14:6f:60:4e:1a:8f: 35:5f:d3:05:81:f2:78:04:49:c6:74:c2:b0:9b:6b:33:2b:a4: b5:38:a5:94:a3:07:d1:e9:71:00:11:9c:a9:06:78:fb:24:c4: 6c:38:1a:9a:c3:43:b6:d2:fe:05:f7:e6:47:53:5b:89:b6:58: 3a:d5:ec:6c:62:eb:ec:11:6b:2c:f0:69:8b:3c:a4:aa:83:51: 6f:91:c2:4f:36:a5:64:e6:1a:30:90:76:09:55:37:7d:07:be: d5:ae:6a:00:90:86:56:b1:63:ed:b1:8b:fd:9d:42:b7:09:51: fa:81:61:9c:db:72:c6:9f:98:96:f3:f6:90:89:6c:2e:44:44: 96:56:12:9a:21:d2:d0:a9:9f:d8:ad:46:89:ca:bb:7e:11:b7: f7:f6:94:d2 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUCiqvKOJ9LklEiACOVpVlLF2/F/gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTUyQjMxQTI2RTkyQTlERDZBNTg1QjkyMzc1QjdGQ0E0 RkE2Njk4NDAeFw0yNTA5MTcwODI2MzJaFw0yNjA5MTYwODMxMzJaMDMxMTAvBgNV BAMTKENDNzNGODFBMTFDN0Q3Q0E1RTVGRjc2NEM0MDRGNkQ5QjBGQjgzODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBp/B71u9V1hw5EvWeWAucv6z9 OZE/nVukhMm0dD93ZZvk5BJKM8m1TTVF9GevIt9rSmWgrKoekLpMlu27pjbaV8kF zo1oQrIIFkxuMahVid2CIE0rDRArKkwomV0gqJse/W5VOH2cGUzmDxBcYgyEfIQA LVb3fUoJBIYGBKB6jB53jtDxJRb19aZEaV99m4bTN5SCQ4qMM6x7y2dbBkP0xIRy glzhIxS+AOtGQbAa8wjDmmnFqFirzsBGQmiHYzIpRW1oBpoCYdPWgf9sHVeIwU/h SSuBfOYrB5Z9rI53BcUKVvNpP+1pA99/bT74ng0nXt/08yUtZaSLP/1b5FxXAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUzHP4GhHH18peX/dkxAT22bD7g4kwHwYDVR0j BBgwFoAUVSsxom6Sqd1qWFuSN1t/yk+maYQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MDE0MzJjYy0zYmM5LTQ4NTgtYjUwNi0yMThhYWIwYjA4OWMvMC81NTJCMzFBMjZF OTJBOURENkE1ODVCOTIzNzVCN0ZDQTRGQTY2OTg0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTUyQjMxQTI2RTkyQTlERDZBNTg1QjkyMzc1QjdGQ0E0RkE2 Njk4NC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzIwMTQzMmNjLTNiYzktNDg1OC1i NTA2LTIxOGFhYjBiMDg5Yy8wLzMxMzEzMDJlMzIzMzMyMmUzOTM1MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNTMyMzczODMwLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbuhfMA0GCSqG SIb3DQEBCwUAA4IBAQAUhBQ3T4RaMVe3MS/Mtyv1FbdoQRznlfiOB+IpS5xvHr4h TOsj+XbFRljpfbyxtY1Zna3r4kUeyD0HccK10Y4UBcrS43sJzz8DN3Sl1MPGxQGz lD7EiJ54117AAdv9rYCAJHFX1GQUb2BOGo81X9MFgfJ4BEnGdMKwm2szK6S1OKWU owfR6XEAEZypBnj7JMRsOBqaw0O20v4F9+ZHU1uJtlg61exsYuvsEWss8GmLPKSq g1FvkcJPNqVk5howkHYJVTd9B77VrmoAkIZWsWPtsYv9nUK3CVH6gWGc23LGn5iW 8/aQiWwuRESWVhKaIdLQqZ/YrUaJyrt+Ebf39pTS -----END CERTIFICATE-----Generated at Mon Oct 20 11:58:33 2025 by rpki-client